Thanks to all who responded to my posts.
I now have both happy Outlook and Eudora users.

The solution I found for running APOP and SSL together and at the
same time denying plain-text authentication is:

1.  Run qpopper on the pop3 port configured for APOP only.

2.  Run qpopper also on an unused (nonstandard) port, configured for plain-text.

3.  Run SSLwrap on the spop3 (SSL pop3) port, configured to send
the output to the nonstandard qpopper port.

4.  If you are worried that someone may still use the nonstandard port for 
plain-text logins, then deny external access to that port using the 
tcp wrapper (assuming you have one).

Karl


Reply via email to